A tool for enforcing commit and license header policies in build pipelines.
Conform is a policy enforcement tool that validates commit messages and license headers in build pipelines. It ensures compliance with standards like Conventional Commits, DCO, and GPG signatures, automating quality checks to prevent non-compliant code from being merged.
Development teams and DevOps engineers who need to enforce coding standards and compliance in CI/CD workflows, particularly those using Git-based version control.
Conform provides a lightweight, configurable way to automate policy checks, reducing manual review overhead and ensuring consistent code quality across projects. Its integration with Git hooks and containerized execution makes it easy to adopt in existing pipelines.
Policy enforcement for your pipelines.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Validates multiple commit aspects including DCO, GPG signatures, Conventional Commits format, and spell checking, as shown in the detailed sample output with checks like 'Imperative Mood' and 'Spellcheck'.
Allows precise control over license header enforcement via .conform.yaml, with options for file suffixes, skip paths, and custom header text to match project-specific requirements.
Supports Git commit-msg hooks, Pre-Commit hooks, and Docker container execution, making it straightforward to adopt in existing CI/CD workflows without major overhead.
Includes spell check for commit messages with configurable locales, reducing typographical errors and improving commit log quality, as evidenced in the policy checks.
Only enforces commit and license policies, lacking support for common code quality checks like linting, formatting, or security scans, which requires additional tooling.
The .conform.yaml file requires detailed settings for each policy, such as jira keys and conventional commit scopes, which can be overwhelming for simple use cases or rapid onboarding.
Currently at version 0.1.0-alpha.22, indicating potential breaking changes and less stability for production environments, as noted in the release badges and Docker tags.